Ysaere Subprocessors
Last updated:
Ysaere engages third-party service providers (“subprocessors”) in the categories below to deliver the platform. Each subprocessor that processes personal data is bound by contractual terms (including a Data Processing Agreement where required) consistent with our privacy commitments and applicable law.
This public page lists processing categories only. A named vendor inventory is not published here — it is reserved for customers under a signed agreement or NDA, and for internal compliance review. That is intentional: we disclose what the law and buyers need without handing a free copy of our operating stack to scavengers.
| Category | Purpose | Location |
|---|---|---|
| Cloud infrastructure & hosting | Application hosting, databases, queues, and object storage for the Service | United States |
| Payment processing | Checkout, subscriptions, and credit purchases (card data handled by the processor) | United States / Ireland (entity per processor) |
| Transactional email | Account verification, password reset, and service notifications | United States |
| DNS, edge security & bot protection | Domain DNS, Turnstile / bot challenges, and related edge controls | Global edge |
| AI inference & embeddings | Third-party model APIs used to generate intelligence outputs and embeddings under contractual zero-/limited-retention terms | United States (primary) |
| Error & operational monitoring | Application error reporting and operational telemetry when enabled | United States |
| Product analytics & usage telemetry | Pseudonymous product-usage events (account identifier, tenant identifier, and non-identifying event attributes such as endpoint, credits and client) used to measure activation and funnel performance. Report contents, uploaded documents, target/company names and email addresses are excluded by an allowlist and are never transmitted. | United States |
| Website analytics (marketing site) | Cookieless, aggregate page-view measurement on the public marketing site. No cookies, no cross-site tracking, and no personal data collected. | European Union |
Named inventory (customers)
Enterprise customers and parties under NDA may request the current named subprocessor schedule by emailing privacy@ysaere.com with the subject line “Subprocessor schedule”. Signed Order Forms / DPAs may incorporate a confidential annex.
Notice of changes
We notify customers at least 30 days before adding a new subprocessor category (or a material change to an existing category's role or data types) that processes customer personal data. To subscribe to those notices, email privacy@ysaere.com with the subject “Subprocessor updates”.
Questions about data processing or DPAs? Email privacy@ysaere.com. For data-subject rights (export, deletion, correction), sign in and visit Account → Privacy & Data.